what you don't know can hurt you

Prosieben Community Code Injection

Prosieben Community Code Injection
Posted Nov 2, 2011
Authored by Alexander Fuchs | Site vulnerability-lab.com

The Prosieben Community website suffers from a persistent cross site scripting vulnerability.

tags | exploit, xss
MD5 | 65deabb3160965917241f2e419e67a69

Prosieben Community Code Injection

Change Mirror Download
Title:
======
Prosieben Community Website - Persistent Script Code Inject


Date:
=====
2011-10-31


References:
===========
http://www.vulnerability-lab.com/get_content.php?id=306


VL-ID:
=====
306


Abstract:
=========
The Vulnerability Lab Research Team discovered a persistent script code injection vulnerability on prosiebens community website.


Report-Timeline:
================
2011-10-23: Vendor Notification
2011-10-24: Vendor Response/Feedback
2011-10-27: Vendor Fix/Patch
2011-11-01: Public or Non-Public Disclosure


Status:
========
Published


Exploitation-Technique:
=======================
Remote


Severity:
=========
High


Details:
========
A persistent script code injection vulnerability is detected on Prosiebens Community vendor website.
Remote attackers can inject/execute malicious script codes on application side to compromise the community profile of users.
Successful exploitation can result in session hijacking & profile manipulation via script code injection.

Vulnerable Module(s):
[+] Profile Content & Output - Prosieben Community


Proof of Concept:
=================
The vulnerability can be exploited by remote attacker with user account for the community portal.
For demonstration or reproduce ...

<li id="ka_profComment_3464320" class="ka_profComment clearfix" style="height: 0pt;"><div class="ka_profileCommentDate">
vor 3 Wochen <span class="ka_pipe">|</span> <a onclick='var x=".tl(";s_objectID="http://meinecommunity.prosieben.de/service
/displayKickPlace.kickAction?u=34728024&as=122896_1";return this.s_oc?this.s_oc(e):
true' href="/service/displayKickPlace.kickAction?u=34728024&as=122896">Trololol</a> </div><div class="ka_profileCommentImg">
<a onclick='var x=".tl(";s_objectID="http://meinecommunity.prosieben.de/service/displayKickPlace.kickAction?u=34728024
&as=122896_2";return this.s_oc?this.s_oc(e):true' href="/service/displayKickPlace.kickAction?u=34728024&as=122896">
<span style="background-image: url("http://media.kickstatic.com/kickapps/images/122896/icons/defaultMember_122896_portrait
48X48.jpg");"></span></a></div><div class="ka_profileCommentContent clearfix"><p>[PERSISTENT SCRIPT CODE EXECUTION HERE!]>
</p></div><div class="ka_profileCommentControls clearfix"><span class="ka_flag ka_flag_comment"><a class="" onclick='var x="
.tl(";s_objectID="http://meinecommunity.prosieben.de/service/displayKickPlace.kickAction?u=34728024&as=122896#_4";return
this.s_oc?this.s_oc(e):true' href="#">Beitrag melden</a></span></div></li>


Risk:
=====
The security risk of the persistent script code inject is estimated as high(-).


Credits:
========
Vulnerability Research Laboratory - Alexander Fuchs (F0x23)


Disclaimer:
===========
The information provided in this advisory is provided as it is without any warranty. Vulnerability-Lab disclaims all warranties,
either expressed or implied, including the warranties of merchantability and capability for a particular purpose. Vulnerability-
Lab or its suppliers are not liable in any case of damage, including direct, indirect, incidental, consequential loss of business
profits or special damages, even if Vulnerability-Lab or its suppliers have been advised of the possibility of such damages. Some
states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation
may not apply. Any modified copy or reproduction, including partially usages, of this file requires authorization from Vulnerability-
Lab. Permission to electronically redistribute this alert in its unmodified form is granted. All other rights, including the use of
other media, are reserved by Vulnerability-Lab or its suppliers.

Copyright © 2011|Vulnerability-Lab




--
Website: www.vulnerability-lab.com ; vuln-lab.com or vuln-db.com
Contact: admin@vulnerability-lab.com or support@vulnerability-lab.com

Comments

RSS Feed Subscribe to this comment feed

No comments yet, be the first!

Login or Register to post a comment

File Archive:

July 2019

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Jul 1st
    34 Files
  • 2
    Jul 2nd
    15 Files
  • 3
    Jul 3rd
    9 Files
  • 4
    Jul 4th
    8 Files
  • 5
    Jul 5th
    2 Files
  • 6
    Jul 6th
    3 Files
  • 7
    Jul 7th
    1 Files
  • 8
    Jul 8th
    15 Files
  • 9
    Jul 9th
    15 Files
  • 10
    Jul 10th
    20 Files
  • 11
    Jul 11th
    17 Files
  • 12
    Jul 12th
    16 Files
  • 13
    Jul 13th
    2 Files
  • 14
    Jul 14th
    1 Files
  • 15
    Jul 15th
    20 Files
  • 16
    Jul 16th
    27 Files
  • 17
    Jul 17th
    7 Files
  • 18
    Jul 18th
    5 Files
  • 19
    Jul 19th
    12 Files
  • 20
    Jul 20th
    0 Files
  • 21
    Jul 21st
    0 Files
  • 22
    Jul 22nd
    0 Files
  • 23
    Jul 23rd
    0 Files
  • 24
    Jul 24th
    0 Files
  • 25
    Jul 25th
    0 Files
  • 26
    Jul 26th
    0 Files
  • 27
    Jul 27th
    0 Files
  • 28
    Jul 28th
    0 Files
  • 29
    Jul 29th
    0 Files
  • 30
    Jul 30th
    0 Files
  • 31
    Jul 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2019 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close